Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: +M5AdDsCoiXEqGHnnt3DYDISOM2ruBs3jfBeWf8FNSg=
Subject key identifier: C5:D8:21:CF:B6:6D:FE:00:BE:53:21:14:BD:81:42:2D:57:F7:60:63
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 01A06E02CB03D36899278DEB9AD018477107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 1148
Signing time: Fri 04 Sep 2026 20:01:11 +0000
Manifest this update: Fri 04 Sep 2026 20:01:11 +0000
Manifest next update: Sat 05 Sep 2026 20:01:11 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: gKyYKUdGHNQRedn0R6grb7Un3JKF7FnMuDzCEi4/EvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:cb:03:d3:68:99:27:8d:eb:9a:d0:18:47:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Sep 4 20:01:11 2026 GMT
Not After : Sep 5 20:01:11 2026 GMT
Subject: CN=c5d821cfb66dfe00be532114bd81422d57f76063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:c8:49:a3:5b:9b:a3:c9:9b:dd:3a:be:53:
1f:d2:72:35:74:99:04:87:3f:1e:d5:da:66:8f:5a:
9a:7e:f7:48:bf:ba:c1:b3:2c:98:45:29:be:81:7b:
2b:0f:2c:aa:11:6f:09:54:6f:01:ab:8f:88:b0:55:
29:86:a4:ec:43:ef:aa:35:43:a4:a6:79:8e:ec:3a:
e2:17:58:17:9b:79:72:76:ff:11:3b:b1:30:12:11:
29:28:54:82:47:e7:17:ce:57:c3:c2:6a:de:77:b5:
42:85:37:c3:c6:02:25:0b:41:ed:be:99:0a:58:99:
87:52:69:41:ab:6a:3f:9e:a6:3c:74:47:d1:c9:be:
ee:c7:54:18:2e:81:ef:da:44:b6:62:27:e9:d0:41:
cf:8c:f7:cc:e5:f3:9a:94:34:52:77:49:5a:b9:59:
ec:1d:fc:05:89:9b:5f:c2:63:32:cd:f4:4f:7f:38:
fe:fb:d1:f2:07:fa:13:c0:4e:f7:45:74:a9:b6:8d:
44:71:c0:38:fa:3f:7a:33:74:e6:56:d4:56:37:4e:
0a:73:3c:ce:bc:cc:14:3a:96:30:a4:1c:8b:91:2f:
93:3c:e4:7b:96:ae:db:13:4c:94:d2:b9:75:07:cf:
b4:76:16:81:5d:d3:70:82:89:ca:f6:8a:27:8d:67:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:21:CF:B6:6D:FE:00:BE:53:21:14:BD:81:42:2D:57:F7:60:63
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d6:ea:1d:f1:e7:1e:f1:9f:6c:a3:aa:3f:1c:eb:67:f1:47:
77:bd:01:b5:70:d4:51:47:e3:fa:94:9d:01:4c:eb:1a:bc:94:
d3:82:24:15:13:cd:f3:af:8d:75:4f:f0:21:7a:37:ee:86:f5:
d3:a5:24:a0:9b:b3:98:9c:45:f6:ab:10:f0:91:50:4c:e4:5f:
46:43:9a:94:c0:df:89:52:78:a9:5e:13:ca:4c:ff:e1:c9:9c:
c3:da:26:a7:99:55:06:4a:a8:45:e1:f2:dc:e1:1c:4b:2d:64:
82:e2:16:4a:2e:60:57:ab:8f:71:9c:2b:8b:06:05:86:e9:fc:
64:fd:78:37:88:1c:f9:ab:e1:69:25:f3:64:de:79:31:4d:5d:
1a:40:51:b0:d9:8c:de:4f:69:6b:74:f9:2a:5d:ae:68:42:01:
92:c5:24:1d:35:2e:93:9a:d0:c5:9a:d1:e5:dc:b9:47:0f:9a:
cc:27:0d:6e:3c:85:2b:83:42:c4:9f:75:5b:36:23:e3:c0:2c:
f2:9a:bb:58:53:e2:3e:5e:c3:f0:ac:4a:a0:e2:72:ff:9d:29:
98:1c:3e:38:2c:30:d5:9a:36:11:58:21:29:e4:5d:ba:68:68:
0e:bc:7f:4b:69:11:9b:62:1a:74:49:ed:4c:d5:3b:76:a3:40:
d3:4a:f1:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuAssD02iZJ43rmtAYR3EHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy
OTU1NGEwHhcNMjYwOTA0MjAwMTExWhcNMjYwOTA1MjAwMTExWjAzMTEwLwYDVQQD
EyhjNWQ4MjFjZmI2NmRmZTAwYmU1MzIxMTRiZDgxNDIyZDU3Zjc2MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bPISaNbm6PJm906vlMf0nI1dJkE
hz8e1dpmj1qafvdIv7rBsyyYRSm+gXsrDyyqEW8JVG8Bq4+IsFUphqTsQ++qNUOk
pnmO7DriF1gXm3lydv8RO7EwEhEpKFSCR+cXzlfDwmred7VChTfDxgIlC0HtvpkK
WJmHUmlBq2o/nqY8dEfRyb7ux1QYLoHv2kS2Yifp0EHPjPfM5fOalDRSd0lauVns
HfwFiZtfwmMyzfRPfzj++9HyB/oTwE73RXSpto1EccA4+j96M3TmVtRWN04KczzO
vMwUOpYwpByLkS+TPOR7lq7bE0yU0rl1B8+0dhaBXdNwgonK9oonjWfX0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXYIc+2bf4AvlMhFL2BQi1X92BjMB8GA1UdIwQY
MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct
ZjczNWUzZGFmZDUzLzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz
LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdbqHfHn
HvGfbKOqPxzrZ/FHd70BtXDUUUfj+pSdAUzrGryU04IkFRPN86+NdU/wIXo37ob1
06UkoJuzmJxF9qsQ8JFQTORfRkOalMDfiVJ4qV4Tykz/4cmcw9omp5lVBkqoReHy
3OEcSy1kguIWSi5gV6uPcZwriwYFhun8ZP14N4gc+avhaSXzZN55MU1dGkBRsNmM
3k9pa3T5Kl2uaEIBksUkHTUuk5rQxZrR5dy5Rw+azCcNbjyFK4NCxJ91WzYj48As
8pq7WFPiPl7D8KxKoOJy/50pmBw+OCww1Zo2EVghKeRdumhoDrx/S2kRm2IadEnt
TNU7dqNA00rxig==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:13:20 2026 by rpki-client